The Code You Didn't Write - How Dependencies May Betray You

Explore the hidden security risks lurking in third-party dependencies through this 31-minute conference talk from HackMiami XII 2025. Discover how external code libraries and packages can introduce vulnerabilities into your applications, even when your own code is secure. Learn about dependency confusion attacks, supply chain compromises, and malicious package injection techniques that attackers use to exploit trust relationships in modern software development. Understand the methods cybercriminals employ to infiltrate popular repositories and package managers, and examine real-world case studies of dependency-based attacks that have impacted major organizations. Gain practical insights into identifying suspicious dependencies, implementing security scanning tools, and establishing robust dependency management practices to protect your projects from these often-overlooked attack vectors.